Solved

How to See Where Active Directory Groups Are Being Utilized?

Posted on 2014-12-23
5
30 Views
Last Modified: 2014-12-30
I have inherited a less than perfectly documented environment especially in regards to active directory so I am having trouble discerning where our active directory groups are being used. I have made the mistake of moving certain groups only to find out an important system was using that group to populate its permissions and user accounts. DOes anyone know of a way to find where AD groups are being used and by what system?
0
Comment
Question by:Todd Willoughby
  • 2
  • 2
5 Comments
 
LVL 11

Expert Comment

by:rharland2009
Comment Utility
0
 
LVL 10

Expert Comment

by:Walter Padrón
Comment Utility
I'm afraid this is not possible the AD is not aware of who or where the groups has been used.
You should do a search on a system by system, service by service, server by server basis
BTW It doesn't have to be a manual process but no tool give you all the information in a consolidated report.
0
 

Author Comment

by:Todd Willoughby
Comment Utility
That's what I was a afraid of....any tools that you would suggest that would help me find all of our systems?
0
 
LVL 10

Accepted Solution

by:
Walter Padrón earned 500 total points
Comment Utility
SpiceWorks

http://cjwdev.co.uk  AD Permissions Reporter

But you'll need PowerShell scripts mostly.
0
 

Author Closing Comment

by:Todd Willoughby
Comment Utility
Thanks for your help!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now